Salesforce.com, a CRM software vendor, has fallen victim to a phishing scheme.